Using the sample MyAuthStrategyProvider, the strategy I a using (AppID API Strategy) modifies the req object to insert the OAuth access token.
I need to read this token before returning the user object to the caller. I'm having a hard time understanding where and how to achieve this.